Fluentd logs is full of backslash and kibana doesn't show k8s pods logs

elasticsearch logging kubernetes kibana fluentd

There are few things you should check/try:

Check how your patterns are configured (ex: td-agent.conf, fluent.conf).
Test your format regex matching with Fluentular to see if there are any potential mistakes.
Consider using fluent-plugin-multi-format-parser:
For more information about resolving similar pattern not match issue, you can see this answer.

Please let me know if any of the above helped.

elasticsearch logging kubernetes kibana fluentd

For posterity, I'm going to provide this solution, which seems a lot more straight forward than anything else I've found:

env:    - name: FLUENT_CONTAINER_TAIL_PARSER_TYPE      value: /^(?<time>.+) (?<stream>stdout|stderr) [^ ]* (?<log>.*)$/

Just place that in the env variables underneath your fluentd YAML configuration.

CodeHunter